AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims 
in the application: 



Listing of Claims: 
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1 . (Currently amended) A method 



application snapshot, the application snapshot including a state of an executing 



for verifying type safety of an 



program that is moved from a first computing device to a second computing 
device across a network in order to continue execution on the second computing 
device, the method comprising: j 

receiving the application snapshot from the first computing device on the 
second computing device, wherein the application snapshot contains dynamic 
variables and defines the dynamic state of the executing program and wherein the 
application snapshot includes a subprogram! an operand stack, and a point of 
execution; j 

examining the application snapshot to identify the subprogram and the 
point of execution within the subprogram; ^ 

examining the subprogram to determine an expected structure of the 
operand stack at the point of execution; \ 



validating that the state of the application snapshot on the second 
computing device is consistent with the expected structure of the operand stack; 
and 

if the state of the application snapshot is ^alidated as consistent with the 
expected structure of the operand stack, resuming execution of the application 
snapshot on the second computing device. 
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1 2. (Original) The method of claim 1, wherein examining the subprogram 

2 to determine the expected structure of the operand stack at the point of execution 

3 involves examining the subprogram with a code verifier, wherein the code verifier 

4 ensures that: 

5 the subprogram does not cause the operand stack to overflow and 

6 underflow; 

7 a use of a local variable does not violate type safety; and 

8 an argument of an instruction is of an expected type. 



1 3. (Original) The method of claim 1, wherein the operand stack contains at 

2 least one local variable, at least one Argument that is passed as a parameter to the 

3 subprogram, and an offset to the point of execution within the subprogram. 
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4. (Original) The method of claim 2, wherein the expected structure of the 



operand stack includes a collective size of entries and the types of entries expected 

i 

on the operand stack at the point of execution within the subprogram. 



5. (Original) The method of <^imj< further comprising restoring the state 
of an object within the application snat^mft on the second computing device by 
changing a pointer from an address/of &e object on the first computing device to 
an address of the object on the second computing device. 



6. (Original) The method of claim 4, wherein validating that the state of 
the application snapshot on the second Jomputing device is consistent with the 
expected structure of the operand stack involves ensuring that the collective size 
of entries and the types of entries on the 'operand stack agree with the collective 
size of entries and the types of entries expected on the operand stack. 
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7. (Original) The method of clkm 1 5 wherein resuming execution of the 



application snapshot involves restartinj 
within the second computing device. 



the subprogram at the point of execution 



8. (Currently amended) A computer-readable storage medium storing 
instructions that when executed by a co mputer causes the computer to perform a 
method for verifying type safety of an application snapshot, the application 
snapshot including a state of an executing program that is moved from a first 
computing device to a second computing device across a network in order to 
continue execution on the second computing device, the method comprising: 

receiving the application snapshot from the first computing device on the 



second computing device, wherein the 



variables and defines the dynamic state 



application snapshot contains dynamic 



of the executing program and wherein the 



application snapshot includes a subprogram, an operand stack, and a point of 
execution; j 

examining the application snapshot to identify the subprogram and the 
point of execution within the subprogram; 

examining the subprogram to determine an expected structure of the 
operand stack at the point of execution; 



validating that the state of the application snapshot on the second 
computing device is consistent with the expected structure of the operand stack; 
and 1 

if the state of the application snanshot is validated as consistent with the 
expected structure of the operand stack, resuming execution of the application 
snapshot on the second computing device. 



1 9. (Original) The computer-readable storage medium of claim 8, wherein 

2 examining the subprogram to determine thelexpected structure of the operand 
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3 stack at the point of execution involves examining the subprogram with a code 

4 verifier, wherein the code verifier ensures that: 

5 the subprogram does not calse the operand stack to overflow and 

6 underflow; \ 

7 a use of a local variable doeswiot violate type safety; and 

8 an argument of an instructionus of an expected type. 



1 10. (Original) The computer-readable storage medium of claim 8, wherein 

2 the operand stack contains at least one local variable, at least one argument that is 

3 passed as a parameter to the subprogram, and an offset to the point of execution 

4 within the subprogram. 



1 11. (Original) The computer-readable storage medium of claim 9, wherein 

2 the expected structure of the operand stack includes a collective size of entries and 

3 the types of entries expected on the operand stack at the point of execution within 

4 the subprogram. 



1 12. (Original) The computer-readable storage medium of claim 8, further 

2 comprising restoring the state of an object] wtimn the application snapshot on the 

3 second computing device by changing a roimWfrom an address of the object on 

4 the first computing device to an address oftne object on the second computing 

5 device. 



1 13. (Original) The computer-readable storage medium of claim 11, 

2 wherein validating that the state of the application snapshot on the second 

3 computing device is consistent with the expected structure of the operand stack 

4 involves ensuring that the collective size of entlies and the types of entries on the 
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5 operand stack agree with the collective size of entries and the types of entries 

6 expected on the operand stack. 



1 14. (Original) The computefi-readable storage medium of claim 8, wherein 

2 resuming execution of the application snapshot involves restarting the subprogram 

3 at the point of execution within the second computing device. 



1 15. (Currently amended) An apparatus that facilitates verifying type safety 

2 of an application snapshot, the application snapshot including a state of an 



a first computing device to a second 
brder to continue execution on the second 



3 executing program that is moved from 

4 computing device across a network in 

5 computing device, comprising: 

6 a receiving mechanism that is configured to receive the application 

7 snapshot from the first computing deviie on the second computing device, 

8 wherein the application snapshot contains dynamic variables and defines the 

9 dynamic state of the executing program Lid wherein the application snapshot 

10 includes a subprogram, an operand stack! and a point of execution; 

1 1 an examination mechanism that is configured to examine the application 

12 snapshot to identify the subprogram and the point of execution within the 

13 subprogram wherein, the examination mechanism is configured to also examine 

14 the subprogram to determine an expected structure of the operand stack at the 

1 5 point of execution; 

16 a validation mechanism that is configured to validate that the state of the 

17 application snapshot on the second computing device is consistent with the 

1 8 expected structure of the operand stack; and 1 

19 an execution mechanism that is configured to resume execution of the 

20 application snapshot on the second computing device if the state of the application 
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21 snapshot is validated as consistent 

22 stack. 



with the expected structure of the operand 



1 16. (Original) The apparatus of claim 15, wherein the examination 

2 mechanism includes a code verifier, wherein the code verifier is configured to 

3 ensure that: 

4 the subprogram does not caluse the operand stack to overflow and 

5 underflow; 

6 a use of a local variable does not violate type safety; and 

7 an argument of an instruction is of an expected type. 
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17. (Original) The apparatuslof claim 15, wherein the operand stack 
contains at least one local variable, at least one argument that is passed as a 



parameter to the subprogram, and an 
subprogram. 



offset to the point of execution within the 



18. (Original) The apparatus of claim 16, wherein the expected structure of 
the operand stack includes a collective|size of entries and the types of entries 
expected on the operand stack at the point of execution within the subprogram. 
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19. (Original) The apparatus of clajm 15, further comprising an object 
restoring mechanism that is configured to^eStore the state of an object within the 
application snapshot on the second computing device by changing a pointer from 
an address of the object on the first ^mftithig device to an address of the object 



on the second computing device. 

20. (Original) The apparatus of cL 
mechanism is configured to ensure that th 



£ im 1 8, wherein the validation 
i collective size of entries and the types 
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3 of entries on the operand stack agree with the collective size of entries and the 

4 types of entries expected on the operandi stack. 



/M ' . 1 21. (Original) The apparatus of claim 15, wherein in resuming execution 

oW/ > 2 of the application snapshot, the execution mechanism is configured to restart the 
^ 3 subprogram at the point of execution within the second computing device. 
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